To enable the struts validator on an application, which configuration setting should be applied in the struts validator configuration file?

Identify the type of attack depicted in the following figure.

Ted is an application security engineer who ensures application security activities are being followed during the entire lifecycle of the project. One day, he was analyzing various interactions of users depicted in the use cases of the project under inception. Based on the use case in hand, he started depicting the scenarios where attacker could misuse the application. Can you identify the activity on which Ted is working?

The threat modeling phase where applications are decomposed and their entry points are reviewed from an attacker's perspective is known as ________

Oliver, a Server Administrator (Tomcat), has set configuration in web.xml file as shown in the following screenshot. What is he trying to achieve?